NVD

Id
20677  
Name
CVE-2016-5423  
Description
PostgreSQL before 9.1.23, 9.2.x before 9.2.18, 9.3.x before 9.3.14, 9.4.x before 9.4.9, and 9.5.x before 9.5.4 allow remote authenticated users to cause a denial of service (NULL pointer dereference and server crash), obtain sensitive memory information, or possibly execute arbitrary code via (1) a CASE expression within the test value subexpression of another CASE or (2) inlining of an SQL function that implements the equality operator used for a CASE expression involving values of different types.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-14  
Seq
2016-5423  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
113216 20677 CVE-2016-5423 DSA-3646  View
113217 20677 CVE-2016-5423 92433  View
113218 20677 CVE-2016-5423 1036617  View
113219 20677 CVE-2016-5423 https://bugzilla.redhat.com/show_bug.cgi?id=1364001  View
113220 20677 CVE-2016-5423 https://www.postgresql.org/about/news/1688/  View
113221 20677 CVE-2016-5423 https://www.postgresql.org/docs/current/static/release-9-1-23.html  View
113222 20677 CVE-2016-5423 https://www.postgresql.org/docs/current/static/release-9-2-18.html  View
113223 20677 CVE-2016-5423 https://www.postgresql.org/docs/current/static/release-9-3-14.html  View
113224 20677 CVE-2016-5423 https://www.postgresql.org/docs/current/static/release-9-4-9.html  View
113225 20677 CVE-2016-5423 https://www.postgresql.org/docs/current/static/release-9-5-4.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5478 JVNDB-2016-006251 PostgreSQL におけるサービス運用妨害 (DoS) の脆弱性 PostgreSQL には、サービス運用妨害 (NULL ポインタデリファレンス) 状態にされる、重要なメモリ情報を取得される、または任意のコードを実行される脆弱性が存在します。 CVE-2016-5423 91929 CVE-2016-5423 20677 6.5 8.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006251.html 2016-08-11 2016-12-16 View